Caddy
tcp/80
nginx
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd5425845b26b3d619bd03e76a65fbc40b
Found 38 files trough .DS_Store spidering: /docker-compose.yml /fix.php /index.php /laskuri /license.txt /readme.html /wp-activate.php /wp-admin /wp-blog-header.php /wp-comments-post.php /wp-config-docker.php /wp-config-sample.php /wp-config.php /wp-content /wp-content/advanced-cache.php /wp-content/backups-dup-pro /wp-content/cache /wp-content/index.php /wp-content/languages /wp-content/mu-plugins /wp-content/plugins /wp-content/themes /wp-content/upgrade /wp-content/upgrade-temp-backup /wp-content/uploads /wp-content/wp-rocket-config /wp-cron.php /wp-includes /wp-links-opml.php /wp-load.php /wp-login.php /wp-mail.php /wp-settings.php /wp-signup.php /wp-trackback.php /wp_postmeta_attachments.json /wp_posts_attachments.json /xmlrpc.php
Severity: high
Fingerprint: 5f32cf5d6962f09c74247ea574247ea5a3e650a39250f6b1bef8ba22b63d7162
Found 56 files trough .DS_Store spidering: /docker-compose.yml /fix.php /index.php /laskuri /license.txt /readme.html /wp-activate.php /wp-admin /wp-blog-header.php /wp-comments-post.php /wp-config-docker.php /wp-config-sample.php /wp-config.php /wp-content /wp-content/advanced-cache.php /wp-content/backups-dup-pro /wp-content/cache /wp-content/index.php /wp-content/languages /wp-content/mu-plugins /wp-content/plugins /wp-content/themes /wp-content/upgrade /wp-content/upgrade-temp-backup /wp-content/uploads /wp-content/uploads/2016 /wp-content/uploads/2017 /wp-content/uploads/2018 /wp-content/uploads/2019 /wp-content/uploads/2020 /wp-content/uploads/2021 /wp-content/uploads/2022 /wp-content/uploads/2023 /wp-content/uploads/2024 /wp-content/uploads/2025 /wp-content/uploads/complianz /wp-content/uploads/elementor /wp-content/uploads/rank-math /wp-content/uploads/sb-instagram-feed-images /wp-content/uploads/wpallexport /wp-content/uploads/wpallimport /wp-content/uploads/wpcf7_uploads /wp-content/uploads/wpcode /wp-content/wp-rocket-config /wp-cron.php /wp-includes /wp-links-opml.php /wp-load.php /wp-login.php /wp-mail.php /wp-settings.php /wp-signup.php /wp-trackback.php /wp_postmeta_attachments.json /wp_posts_attachments.json /xmlrpc.php
Open service 13.49.10.133:443 · laattabestdev-com.tbwebsite.com
2025-12-21 04:51
HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html Date: Sun, 21 Dec 2025 04:51:40 GMT Etag: "68ca7210-9a15" Last-Modified: Wed, 17 Sep 2025 08:32:16 GMT Server: Caddy Server: nginx Vary: Accept-Encoding, Cookie X-Rocket-Nginx-Serving-Static: HIT Connection: close Transfer-Encoding: chunked
Open service 13.49.10.133:80 · laattabestdev-com.tbwebsite.com
2025-12-21 04:51
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://laattabestdev-com.tbwebsite.com/ Server: Caddy Date: Sun, 21 Dec 2025 04:51:40 GMT Content-Length: 0